@bongos/core 1.21.175 → 1.21.176

package/tests/merge_driver_register.mjs

@@ -34,7 +34,7 @@ const require = createRequire(import.meta.url);
 // a usable path. Enforced by fitness.js (task 1002889).
 const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const { classifyMergeDriverState, registerMergeDriver, MERGE_DRIVER_NAME } =
-  require(path.join(REPO_ROOT, 'scripts/gds/install-git-hooks.js'));
+  require(path.join(REPO_ROOT, 'scripts/bongos/install-git-hooks.js'));
 
 // A throwaway repo with one file attributed to the driver and two divergent branches,
 // so `git merge` actually has to consult the driver config.
@@ -106,9 +106,9 @@ test('registerMergeDriver: default command stays relative, driverScript pins an
   const commands = [];
   const run = (_bin, args) => { if (args[1] === `merge.${MERGE_DRIVER_NAME}.driver`) commands.push(args[2]); };
   registerMergeDriver('/nowhere', { run });
-  assert.equal(commands[0], 'node scripts/gds/git-merge-regen.js %O %A %B %P');
+  assert.equal(commands[0], 'node scripts/bongos/git-merge-regen.js %O %A %B %P');
 
-  const script = path.join(REPO_ROOT, 'scripts', 'gds', 'git-merge-regen.js');
+  const script = path.join(REPO_ROOT, 'scripts', 'bongos', 'git-merge-regen.js');
   registerMergeDriver('/nowhere', { run, driverScript: script });
   const pinned = commands[1];
   const m = pinned.match(/^node "([^"]+)" %O %A %B %P$/);

package/tests/migration_allocation.mjs

@@ -54,7 +54,7 @@ const migrationSql = read('migrations', '081_tasks_needs_migration.sql');
 const dbSrc = lifecycleDbSource();
 // task 1003206: the task router is tasks.js + task-*.js now — read the family.
 const routesSrc = taskRoutesSource();
-const captureSrc = read('scripts', 'gds', 'capture.js');
+const captureSrc = read('scripts', 'bongos', 'capture.js');
 
 // The allocator's trigger, reproduced as a pure predicate. This is the exact
 // condition both claimTask and batchClaim now branch on.
@@ -129,7 +129,7 @@ function shouldReserveMigrationNumber(task) {
   await test('capture.js no longer mirrors the migration regex', () => {
     assert.ok(
       !/MIGRATION_KEYWORD_RE/.test(captureSrc),
-      'the scripts/gds/capture.js keyword mirror must be deleted (server-side detection only)'
+      'the scripts/bongos/capture.js keyword mirror must be deleted (server-side detection only)'
     );
   });
 

package/tests/migration_namespace.mjs

@@ -17,7 +17,7 @@ import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
-const ns = require('../scripts/gds/migration-namespace.js');
+const ns = require('../scripts/bongos/migration-namespace.js');
 
 let passed = 0;
 let failed = 0;

package/tests/migrations_forward_safe.mjs

@@ -15,7 +15,7 @@ import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
-const lint = require('../scripts/gds/lint-migrations.js');
+const lint = require('../scripts/bongos/lint-migrations.js');
 const REPO_ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 
 let passed = 0, failed = 0;

package/tests/mingle.mjs

@@ -326,7 +326,7 @@ test('NOTHING in the module reaches a penalty surface', () => {
   // render, WHICH standing a decline does not touch. Naming a surface in order to
   // disclaim it is the opposite of reaching for it, so both are stripped before
   // the scan. This is the codebase's standing convention: a line that CITES a rule
-  // is the only thing exempt from it (scripts/gds/fitness.js says so of the
+  // is the only thing exempt from it (scripts/bongos/fitness.js says so of the
   // category-advisory guard). Everything else — every identifier, every line of
   // SQL — is scanned.
   const code = SRC

package/tests/mirror_lineage_fulltree.mjs

@@ -19,9 +19,9 @@ import { test } from 'node:test';
 import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
-const { runSimulation } = require('../scripts/gds/mirror-lineage-check.js');
-const { migrationNumberOf } = require('../scripts/gds/migration-namespace.js');
-const { nextFree } = require('../scripts/gds/next-number.js');
+const { runSimulation } = require('../scripts/bongos/mirror-lineage-check.js');
+const { migrationNumberOf } = require('../scripts/bongos/migration-namespace.js');
+const { nextFree } = require('../scripts/bongos/next-number.js');
 
 const MIGRATIONS_DIR = path.join(path.dirname(fileURLToPath(import.meta.url)), '..', 'migrations');
 

package/tests/mirror_lineage_proof.mjs

@@ -9,8 +9,8 @@ const require = createRequire(import.meta.url);
 const {
   migrationNumbersFromPaths, parseEnumChecks, numberingDivergence, enumDrift,
   proveLineage, buildRedactionContext,
-} = require('../scripts/gds/mirror-lineage-check.js');
-const { nextFree } = require('../scripts/gds/next-number.js');
+} = require('../scripts/bongos/mirror-lineage-check.js');
+const { nextFree } = require('../scripts/bongos/next-number.js');
 
 test('migrationNumbersFromPaths picks CORE migrations only (not module/ADR numbers)', () => {
   const set = migrationNumbersFromPaths([

package/tests/mirror_redact.mjs

@@ -1,7 +1,7 @@
 // tests/mirror_redact.mjs
 //
 // GDS-V4 R72 (task 1211) — locks the public-mirror FILE-LEVEL redactor
-// (scripts/gds/mirror-redact.js, ADR 0098 §6). A silent leak from a publish boundary is
+// (scripts/bongos/mirror-redact.js, ADR 0098 §6). A silent leak from a publish boundary is
 // catastrophic, so this proves:
 //   1. instance literals (domain + subdomains, repo/db/world token, owner login + alias,
 //      company) are redacted; localhost/private/RFC-5737 IPs are KEPT, public IPv4/IPv6
@@ -27,7 +27,7 @@ import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
-const R = require('../scripts/gds/mirror-redact.js');
+const R = require('../scripts/bongos/mirror-redact.js');
 const {
   buildRedactionRules, collectSensitiveLiterals, redactText, findLeaks, findSecretLeak,
   deriveInstanceLiterals, isPublicRoutableIPv4, isPublicRoutableIPv6, parseIPv6, registrableLabel,
@@ -213,7 +213,7 @@ t('mirror-redact.js source contains none of THIS instance\'s literals (sourced a
   const brandingPath = path.join(REPO_ROOT, 'config/branding.json');
   if (!fs.existsSync(brandingPath)) { console.log('       (no config/branding.json — vanilla instance, skipping)'); return; }
   const branding = JSON.parse(fs.readFileSync(brandingPath, 'utf8'));
-  const src = fs.readFileSync(path.join(REPO_ROOT, 'scripts/gds/mirror-redact.js'), 'utf8').toLowerCase();
+  const src = fs.readFileSync(path.join(REPO_ROOT, 'scripts/bongos/mirror-redact.js'), 'utf8').toLowerCase();
   const reals = collectSensitiveLiterals(branding);
   // Also check the registrable domain label explicitly.
   const domLabel = registrableLabel(branding?.domains?.publicOrigin);
@@ -226,7 +226,7 @@ t('mirror-redact.js source contains none of THIS instance\'s literals (sourced a
 });
 
 // ── IPv6 boundary guard (task 1688) ─────────────────────────────────────────────────
-// The core packager (scripts/gds/package-core.js) redacts 900+ SOURCE files, exposing
+// The core packager (scripts/bongos/package-core.js) redacts 900+ SOURCE files, exposing
 // a code-vs-prose false positive the prose-heavy mirror rarely hit: a Postgres cast
 // like `$9::bigint` was misread as the address 9:: and CORRUPTED to `$REDACTED_IPbigint`.
 // The guard must kill that false positive with ZERO recall loss on a genuine IPv6.

package/tests/missing_dep_classify.mjs

@@ -1,5 +1,5 @@
 // tests/missing_dep_classify.mjs — the PURE missing-dependency detector core
-// (task 1002827), moved out of scripts/gds/audit-deps.js so a live route can
+// (task 1002827), moved out of scripts/bongos/audit-deps.js so a live route can
 // reuse it without pulling that script's CLI-only machinery into the server
 // process.
 //
@@ -98,8 +98,8 @@ await test('the module reaches touchesOverlap through the module-api doorway, ne
   assert.equal(/require\(['"]\.\.\/\.\.\/src\/bongos\//.test(src), false, 'never a direct src/bongos/* require (ADR 0083)');
 });
 
-await test('scripts/gds/audit-deps.js delegates to this module rather than redefining the pure core', () => {
-  const src = readFileSync(new URL('../scripts/gds/audit-deps.js', import.meta.url), 'utf8');
+await test('scripts/bongos/audit-deps.js delegates to this module rather than redefining the pure core', () => {
+  const src = readFileSync(new URL('../scripts/bongos/audit-deps.js', import.meta.url), 'utf8');
   assert.match(src, /require\('\.\.\/\.\.\/modules\/lifecycle\/missing-dep-classify\.js'\)/);
   assert.equal(/^function classify/m.test(src), false, 'classify is no longer redefined here');
   assert.equal(/^function findMissingDeps/m.test(src), false, 'findMissingDeps is no longer redefined here');

package/tests/module-scope-map.mjs

@@ -134,9 +134,9 @@ test('narrowing the module roster must not narrow the PATH wall', () => {
   // what makes the scope wall pass, leaving the path wall as the only thing that
   // can refuse — which is exactly the claim under test.
   const owned = [
-    ['onboarding', 'scripts/gds/setup.js'],
-    ['autonomy', 'scripts/gds/conductor-dispatch.js'],
-    ['copy-desk', 'scripts/gds/copy-inventory.js'],
+    ['onboarding', 'scripts/bongos/setup.js'],
+    ['autonomy', 'scripts/bongos/conductor-dispatch.js'],
+    ['copy-desk', 'scripts/bongos/copy-inventory.js'],
   ];
   for (const [mod, f] of owned) {
     assert.ok(PROTECTED_GLOBS.includes(f), `fixture assumption: ${f} is a protected surface`);
@@ -165,9 +165,9 @@ test('isProtected actually consults PROTECTED_GLOBS (overlap, prefix-aware both
 // path. Owning the command is not owning the authority. They are asserted by
 // name rather than by count because a count passes on the wrong three.
 const COMMAND_ONLY_MODULES = [
-  ['onboarding', 'scripts/gds/setup.js'],
-  ['autonomy', 'scripts/gds/conductor-dispatch.js'],
-  ['copy-desk', 'scripts/gds/copy-inventory.js'],
+  ['onboarding', 'scripts/bongos/setup.js'],
+  ['autonomy', 'scripts/bongos/conductor-dispatch.js'],
+  ['copy-desk', 'scripts/bongos/copy-inventory.js'],
 ];
 
 test('a module protected ONLY by a CLI entrypoint it owns now derives non-protected', () => {
@@ -202,14 +202,14 @@ test('protected TERRITORY still protects — a directory, and a non-command file
   // path test has to get right, since both start with 'scripts/'.
   assert.ok(PROTECTED_GLOBS.includes('scripts/deploy/'), 'fixture assumption: scripts/deploy/ is protected');
   assert.equal(scope.isProtected(['scripts/deploy/']), true, 'a protected directory under scripts/ is territory');
-  assert.ok(PROTECTED_GLOBS.includes('scripts/gds/hooks/'), 'fixture assumption: scripts/gds/hooks/ is protected');
-  assert.equal(scope.isProtected(['scripts/gds/hooks/']), true, 'scripts/gds/hooks/ is a directory, not a command');
+  assert.ok(PROTECTED_GLOBS.includes('scripts/bongos/hooks/'), 'fixture assumption: scripts/bongos/hooks/ is protected');
+  assert.equal(scope.isProtected(['scripts/bongos/hooks/']), true, 'scripts/bongos/hooks/ is a directory, not a command');
 });
 
 test('a lone protected CLI computes non-protected, but a CLI PLUS territory does not', () => {
-  assert.equal(scope.isProtected(['scripts/gds/setup.js']), false, 'a lone protected CLI does not protect');
+  assert.equal(scope.isProtected(['scripts/bongos/setup.js']), false, 'a lone protected CLI does not protect');
   assert.equal(
-    scope.isProtected(['scripts/gds/setup.js', 'migrations/']), true,
+    scope.isProtected(['scripts/bongos/setup.js', 'migrations/']), true,
     'one command must not mask owned territory — the mixed case is still protected',
   );
 });
@@ -267,7 +267,7 @@ test('provisioning + public-landing joined the roster (task 1002690) — territo
   }
   const prov = scope.globsForModules(['provisioning']);
   assert.ok(prov.includes('modules/provisioning/'), 'provisioning owns its module directory');
-  assert.ok(prov.includes('scripts/gds/provision.js'), 'the control-plane runner travels with its domain');
+  assert.ok(prov.includes('scripts/bongos/provision.js'), 'the control-plane runner travels with its domain');
   assert.ok(scope.globsForModules(['public-landing']).includes('modules/public-landing/'), 'public-landing owns its surface directory');
 });
 
@@ -334,7 +334,7 @@ test('agents joined the roster (task 1002736) — the territory goals 1000038/39
     'modules/agents/module.json',
     'modules/agents/migrations/agents_001_definitions.sql',
     '.claude/agents/reviewer.md',
-    'scripts/gds/agents-sync.js',
+    'scripts/bongos/agents-sync.js',
   ]) {
     assert.equal(covers(touch), true, `wall does not cover ${touch}`);
   }
@@ -351,7 +351,7 @@ test('devsecops joined the roster (task 1003124) — the enforcement territory g
   const globs = scope.globsForModules(['devsecops']);
   assert.ok(globs.includes('.github/'), 'devsecops owns the CI workflow surface');
   assert.ok(globs.includes('.claude/hooks/'), 'devsecops owns the agent hook surface');
-  assert.ok(globs.includes('scripts/gds/fitness.js'), 'the fitness tool travels with the domain');
+  assert.ok(globs.includes('scripts/bongos/fitness.js'), 'the fitness tool travels with the domain');
   // Derived, not hand-set: .github/, package.json, .husky/, .claude/hooks/ and
   // .claude/settings.json all sit in the ADR 0043 protected-surfaces registry, so
   // this key MUST derive protected — creating/widening a goal into it is Archon-only.
@@ -370,8 +370,8 @@ test('devsecops joined the roster (task 1003124) — the enforcement territory g
     '.npmrc',                            // the install-script policy R04 lands
     'package.json',                      // dependency manifest (R04/R07)
     '.gitleaks.toml',                    // the scanner config R03 lands
-    'scripts/gds/fitness.js',            // the ratchet pack R06 extends
-    'scripts/gds/docs-entropy.js',       // the entropy scanner behind the ratchet
+    'scripts/bongos/fitness.js',            // the ratchet pack R06 extends
+    'scripts/bongos/docs-entropy.js',       // the entropy scanner behind the ratchet
   ]) {
     assert.equal(covers(touch), true, `wall does not cover ${touch}`);
   }
@@ -380,7 +380,7 @@ test('devsecops joined the roster (task 1003124) — the enforcement territory g
   assert.equal(covers('src/bongos/auth.js'), false, 'the wall must not cover the kernel auth core');
   assert.equal(covers('.claude/scheduled-tasks/bfg/SKILL.md'), false, 'scheduled-tasks belongs to autonomy, not devsecops');
   assert.equal(covers('.claude/skills/builder-ship/SKILL.md'), false, 'skills stay with the module that ships them');
-  assert.equal(covers('scripts/gds/ship.js'), false, 'the ship pipeline belongs to lifecycle, not devsecops');
+  assert.equal(covers('scripts/bongos/ship.js'), false, 'the ship pipeline belongs to lifecycle, not devsecops');
 });
 
 test('methodology joined the roster (task 1002989) — the instruction surfaces working area 6 walls', () => {
@@ -393,7 +393,7 @@ test('methodology joined the roster (task 1002989) — the instruction surfaces
   assert.ok(globs.includes('CLAUDE.md'), 'methodology owns the always-loaded instruction root');
   assert.ok(globs.includes('docs/'), 'methodology owns the docs library');
   assert.ok(globs.includes('.claude/skills/'), 'the slash-command skills are the methodology definition surface');
-  assert.ok(globs.includes('scripts/gds/start.js'), 'the session-opening composer travels with the domain');
+  assert.ok(globs.includes('scripts/bongos/start.js'), 'the session-opening composer travels with the domain');
   // Derived, not hand-set: CLAUDE.md, docs/canonical-permissions.md and the two trust
   // ADRs sit in the ADR 0043 protected-surfaces registry, so this key MUST derive
   // protected — creating or widening a goal into it is Archon-only (BV1.R57).
@@ -414,8 +414,8 @@ test('methodology joined the roster (task 1002989) — the instruction surfaces
     '.claude/rules/content-charter.md',       // pre-carved for task 1003687
     'docs/adr/0264-the-ten-working-areas.md', // the ADR library
     'docs/handoff-template.md',
-    'scripts/gds/start.js',                   // composes a session's opening context
-    'scripts/gds/discipline-modes.json',      // the discipline→mode table it routes on
+    'scripts/bongos/start.js',                   // composes a session's opening context
+    'scripts/bongos/discipline-modes.json',      // the discipline→mode table it routes on
   ]) {
     assert.equal(covers(touch), true, `wall does not cover ${touch}`);
   }
@@ -425,8 +425,8 @@ test('methodology joined the roster (task 1002989) — the instruction surfaces
   assert.equal(covers('.claude/settings.json'), false, 'the agent settings belong to devsecops');
   assert.equal(covers('.claude/scheduled-tasks/bfg/SKILL.md'), false, 'scheduled-tasks belongs to autonomy, not methodology');
   assert.equal(covers('.claude/agents/reviewer.md'), false, 'agent definitions belong to agents, not methodology');
-  assert.equal(covers('scripts/gds/fitness.js'), false, 'the fitness tool stayed with devsecops (task 1003124)');
-  assert.equal(covers('scripts/gds/ship.js'), false, 'the ship pipeline belongs to lifecycle');
+  assert.equal(covers('scripts/bongos/fitness.js'), false, 'the fitness tool stayed with devsecops (task 1003124)');
+  assert.equal(covers('scripts/bongos/ship.js'), false, 'the ship pipeline belongs to lifecycle');
 });
 
 test('SHARED_GLOBS: the ownerless floor every goal wall includes (task 1003655, ADR 0288)', () => {
@@ -544,7 +544,7 @@ test('devsecops is deliberately NOT cross-cutting (task 1003770)', () => {
   // .github/ or fitness.js while scoped elsewhere IS the confusion being surfaced,
   // so this stays a signal. Widening the cross-cutting roster to devsecops would
   // red these, which is the point: it should take a deliberate edit, not a shrug.
-  for (const f of ['.github/workflows/unit.yml', 'scripts/gds/fitness.js', 'package.json']) {
+  for (const f of ['.github/workflows/unit.yml', 'scripts/bongos/fitness.js', 'package.json']) {
     assert.deepEqual(scope.moduleDriftFiles('lifecycle', [f]), [f], `${f} must still read as drift`);
   }
   // And exactly one module is cross-cutting: every other key's territory still

package/tests/module_api_lazy.mjs

@@ -136,7 +136,7 @@ test('the two lifecycle modules the CLI imports boot no server', () => {
 
 test('every CLI subcommand loads without the server', () => {
   for (const cmd of ['start', 'claim', 'ship', 'task', 'status', 'login', 'setup', 'release', 'cost', 'recall']) {
-    const heavy = loadedAfter(`scripts/gds/${cmd}.js`).filter((f) => HEAVY.test(f));
+    const heavy = loadedAfter(`scripts/bongos/${cmd}.js`).filter((f) => HEAVY.test(f));
     assert.deepEqual(heavy, [], `bongos ${cmd} booted ${heavy.join(', ')}`);
   }
 });

package/tests/module_assess_docs.mjs

@@ -9,8 +9,8 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 const require = createRequire(import.meta.url);
-const { CRITERIA, MAX_HOWTO_CHARS, buildDocsPrompt, parseDocsGrade, gradeHowto, recordDocsSignal } = require('../scripts/gds/module-assess-docs.js');
-const { packModule } = require('../scripts/gds/module-artifact.js');
+const { CRITERIA, MAX_HOWTO_CHARS, buildDocsPrompt, parseDocsGrade, gradeHowto, recordDocsSignal } = require('../scripts/bongos/module-assess-docs.js');
+const { packModule } = require('../scripts/bongos/module-artifact.js');
 const { relativeArtifactPath } = require('../src/bongos/module-store.js');
 
 const HOWTO = [

package/tests/module_assess_installs.mjs

@@ -20,11 +20,11 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { MIN_HOLDERS, PRIOR_TESTERS, assessInstall, assessReliability, assessTesterFeedback, recordInstallSignals } = require('../scripts/gds/module-assess-installs.js');
+const { MIN_HOLDERS, PRIOR_TESTERS, assessInstall, assessReliability, assessTesterFeedback, recordInstallSignals } = require('../scripts/bongos/module-assess-installs.js');
 const reports = require('../src/bongos/module-usage-reports.js');
 const { ERROR_CODE_RE } = require('../src/bongos/module-usage-reports.js');
-const { cmdInstall } = require('../scripts/gds/module.js');
-const { packModule, verifyModuleArtifact } = require('../scripts/gds/module-artifact.js');
+const { cmdInstall } = require('../scripts/bongos/module.js');
+const { packModule, verifyModuleArtifact } = require('../scripts/bongos/module-artifact.js');
 
 const read = (rel) => fs.readFileSync(path.join(ROOT, rel), 'utf8').replace(/\r\n/g, '\n');
 

package/tests/module_assess_price_parity.mjs

@@ -3,7 +3,7 @@
 // on criterion wa5-quality-assessed; ADR 0343 D6).
 //
 // Two proofs, like the update-parity test proves its own criterion:
-//   1. STATIC — no file on the assessment path (scripts/gds/module-assess-*.js)
+//   1. STATIC — no file on the assessment path (scripts/bongos/module-assess-*.js)
 //      names a price, a currency amount, free/paid or an entitlement in its code
 //      (comments are allowed to explain the rule). A price-conditional branch
 //      added anywhere there fails this test, naming the file and line.
@@ -23,8 +23,8 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { composeScore, recomposeScore } = require('../scripts/gds/module-assess-score.js');
-const { assessVersion } = require('../scripts/gds/module-assess-version.js');
+const { composeScore, recomposeScore } = require('../scripts/bongos/module-assess-score.js');
+const { assessVersion } = require('../scripts/bongos/module-assess-version.js');
 
 // ---------------------------------------------------------------------------
 // 1. static — the assessment path never reads price
@@ -41,7 +41,7 @@ function priceHits(src) {
   return codeLines(src).flatMap((l, i) => (PRICE_WORD.test(l) ? [`${i + 1}: ${l.trim()}`] : []));
 }
 
-const ASSESS_DIR = path.join(root, 'scripts', 'gds');
+const ASSESS_DIR = path.join(root, 'scripts', 'bongos');
 const assessFiles = fs.readdirSync(ASSESS_DIR).filter((f) => /^module-assess-.*\.js$/.test(f)).sort();
 
 test('the scan sees the whole assessment path', () => {
@@ -60,7 +60,7 @@ test('the scanner catches a price branch and ignores a comment about price', ()
 });
 
 test('no assessment file names a price in its code', () => {
-  const found = assessFiles.flatMap((f) => priceHits(fs.readFileSync(path.join(ASSESS_DIR, f), 'utf8')).map((h) => `scripts/gds/${f}:${h}`));
+  const found = assessFiles.flatMap((f) => priceHits(fs.readFileSync(path.join(ASSESS_DIR, f), 'utf8')).map((h) => `scripts/bongos/${f}:${h}`));
   assert.deepEqual(found, [], `price must never gate or excuse a score (ADR 0343 D6):\n${found.join('\n')}`);
 });
 

package/tests/module_assess_score.mjs

@@ -14,8 +14,8 @@ import os from 'node:os';
 import path from 'node:path';
 
 const require = createRequire(import.meta.url);
-const { composeScore, recomposeScore } = require('../scripts/gds/module-assess-score.js');
-const { assessVersion, queueAssessment, QUEUE_MAX } = require('../scripts/gds/module-assess-version.js');
+const { composeScore, recomposeScore } = require('../scripts/bongos/module-assess-score.js');
+const { assessVersion, queueAssessment, QUEUE_MAX } = require('../scripts/bongos/module-assess-version.js');
 
 const sig = (id, part, outcome, score = null) => ({ id, part, outcome, score });
 // Every assessVersion call here stubs the test-runner dispatch, so a shell with
@@ -85,7 +85,7 @@ test('New until Install or Reliability is scored (D5) — Tests and Tester feedb
 
 test('price is never an input: nothing in the composer reads one (D6)', () => {
   for (const f of ['module-assess-score.js', 'module-assess-version.js']) {
-    const src = fs.readFileSync(new URL(`../scripts/gds/${f}`, import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
+    const src = fs.readFileSync(new URL(`../scripts/bongos/${f}`, import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
     assert.doesNotMatch(src, /price|credits|cents/i, f);
   }
 });
@@ -260,13 +260,13 @@ test('publishing a version re-assesses that version, after the author has their
   };
   const poolPath = require.resolve('../src/bongos/pool.js');
   require.cache[poolPath] = { id: poolPath, filename: poolPath, loaded: true, exports: { pool: { connect: async () => client, query: client.query } } };
-  const score = require('../scripts/gds/module-assess-version.js');
+  const score = require('../scripts/bongos/module-assess-version.js');
   const real = score.queueAssessment;
   const calls = [];
   score.queueAssessment = (id) => { calls.push(id); return true; };
   try {
     const buildModulesRouter = require('../src/bongos/routes/modules.js');
-    const artifact = require('../scripts/gds/module-artifact.js');
+    const artifact = require('../scripts/bongos/module-artifact.js');
     const src = fs.mkdtempSync(path.join(os.tmpdir(), 'mod-assess-score-src-'));
     fs.mkdirSync(path.join(src, 'weather'));
     fs.writeFileSync(path.join(src, 'weather', 'module.json'), JSON.stringify({ key: 'weather', title: 'Weather', description: 'd', version: '1.0.0', coreVersion: '^1.0.0', contributes: {} }));

package/tests/module_assess_security.mjs

@@ -17,8 +17,8 @@ import os from 'node:os';
 import path from 'node:path';
 
 const require = createRequire(import.meta.url);
-const { assessSecurity, auditDependencies, recordSecuritySignal, insertSecuritySignal, maintenancePosture, registrySpec } = require('../scripts/gds/module-assess-security.js');
-const { packModule } = require('../scripts/gds/module-artifact.js');
+const { assessSecurity, auditDependencies, recordSecuritySignal, insertSecuritySignal, maintenancePosture, registrySpec } = require('../scripts/bongos/module-assess-security.js');
+const { packModule } = require('../scripts/bongos/module-artifact.js');
 const { relativeArtifactPath } = require('../src/bongos/module-store.js');
 
 const file = (p, text = '') => ({ path: p, buf: Buffer.from(text) });
@@ -206,11 +206,11 @@ test('insertSecuritySignal writes the security part with no score', async () =>
 });
 
 test('a core script never requires a module file (the one-way rule)', () => {
-  const src = fs.readFileSync(new URL('../scripts/gds/module-assess-security.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
+  const src = fs.readFileSync(new URL('../scripts/bongos/module-assess-security.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
   assert.doesNotMatch(src, /require\([^)]*modules\//);
 });
 
 test('the gate never runs the module\'s own code', () => {
-  const src = fs.readFileSync(new URL('../scripts/gds/module-assess-security.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
+  const src = fs.readFileSync(new URL('../scripts/bongos/module-assess-security.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
   assert.doesNotMatch(src, /process\.execPath|require\(\s*path\.join|import\(/, 'no node process or require over module files');
 });

package/tests/module_assess_tests.mjs

@@ -19,8 +19,8 @@ import os from 'node:os';
 import path from 'node:path';
 
 const require = createRequire(import.meta.url);
-const { discoverTestFiles, assessTests, recordTestsSignal, insertSignal, runRefusal, testEnv, SANDBOX_PREFIX } = require('../scripts/gds/module-assess-tests.js');
-const { packModule, verifyModuleArtifact } = require('../scripts/gds/module-artifact.js');
+const { discoverTestFiles, assessTests, recordTestsSignal, insertSignal, runRefusal, testEnv, SANDBOX_PREFIX } = require('../scripts/bongos/module-assess-tests.js');
+const { packModule, verifyModuleArtifact } = require('../scripts/bongos/module-artifact.js');
 const { relativeArtifactPath } = require('../src/bongos/module-store.js');
 
 const PASS = "import assert from 'node:assert'; assert.equal(1 + 1, 2); console.log('1 passed, 0 failed');\n";
@@ -194,7 +194,7 @@ test('an unknown version writes nothing', async () => {
 });
 
 test('the runner never consults whether the module is enabled', () => {
-  const src = fs.readFileSync(new URL('../scripts/gds/module-assess-tests.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
+  const src = fs.readFileSync(new URL('../scripts/bongos/module-assess-tests.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
   assert.doesNotMatch(src, /isModuleEnabled/);
 });
 

package/tests/module_assessments_migration.mjs

@@ -91,6 +91,6 @@ test('price is never an input (ADR 0343 D6)', () => {
 });
 
 test('the migration is forward-safe under the lint gate', () => {
-  const lint = require('../scripts/gds/lint-migrations.js');
+  const lint = require('../scripts/bongos/lint-migrations.js');
   assert.deepEqual(lint.scanMigrationSql(SQL).unsafe || [], []);
 });

package/tests/module_catalog.mjs

@@ -9,7 +9,7 @@
 //
 // Pure + hermetic: every case injects its own loaded[]/roots, so nothing here
 // touches the real modules/ tree or a running server. DB-free → picked up by
-// scripts/gds/run-unit-tests.js (the `unit` gate).
+// scripts/bongos/run-unit-tests.js (the `unit` gate).
 import assert from 'node:assert/strict';
 import { test } from 'node:test';
 import { createRequire } from 'node:module';
@@ -19,7 +19,7 @@ import { fileURLToPath } from 'node:url';
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const catalog = require(path.join(ROOT, 'src', 'module-loader', 'catalog.js'));
-const mod = require(path.join(ROOT, 'scripts', 'gds', 'module.js'));
+const mod = require(path.join(ROOT, 'scripts', 'bongos', 'module.js'));
 
 const CORE = path.join(path.sep, 'srv', 'app', 'node_modules', '@bongos', 'core');
 const INST = path.join(path.sep, 'srv', 'app');

package/tests/module_cli.mjs

@@ -2,7 +2,7 @@
 // coreVersion pre-check (BV1.R50 / task 1419, ADR 0083). Hermetic: every fs test
 // scaffolds into a temp dir; the upgrade logic is driven with injected config so
 // no real config/modules.json or running server is touched. DB-free → picked up
-// by scripts/gds/run-unit-tests.js (the `unit` gate).
+// by scripts/bongos/run-unit-tests.js (the `unit` gate).
 import assert from 'node:assert/strict';
 import { test } from 'node:test';
 import { createRequire } from 'node:module';
@@ -13,7 +13,7 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const mod = require(path.join(ROOT, 'scripts', 'gds', 'module.js'));
+const mod = require(path.join(ROOT, 'scripts', 'bongos', 'module.js'));
 const loader = require(path.join(ROOT, 'src', 'module-loader', 'loader.js'));
 const { validateManifest } = require(path.join(ROOT, 'src', 'module-loader', 'manifest-schema.js'));
 const bongos = (await import(new URL('../bin/bongos.js', import.meta.url))).default;
@@ -394,7 +394,7 @@ test('cmdSubmit: usage error (exit 2) when no key is given', async () => {
 
 test('the `module` verb dispatches to module.js, `upgrade` to upgrade.js', () => {
   assert.equal(bongos.VERBS.module.script, 'module.js');
-  // `upgrade` was split into its own scripts/gds/upgrade.js (no longer forwarded
+  // `upgrade` was split into its own scripts/bongos/upgrade.js (no longer forwarded
   // as `module.js upgrade` with prefixArgs).
   assert.equal(bongos.VERBS.upgrade.script, 'upgrade.js');
   // help lists both

package/tests/module_entitlements.mjs

@@ -76,7 +76,7 @@ test('one idempotent table, forward-safe under the lint gate', () => {
   assert.doesNotMatch(DDL, /CREATE TABLE (?!IF NOT EXISTS)/);
   assert.doesNotMatch(DDL, /CREATE INDEX (?!IF NOT EXISTS)/);
   assert.match(DDL, /INSERT INTO schema_migrations \(version\) VALUES \('core_259_module_entitlements'\)\s+ON CONFLICT \(version\) DO NOTHING;/);
-  const lint = require('../scripts/gds/lint-migrations.js');
+  const lint = require('../scripts/bongos/lint-migrations.js');
   assert.deepEqual(lint.scanMigrationSql(SQL).unsafe || [], []);
 });
 

package/tests/module_error_counts.mjs

@@ -17,7 +17,7 @@ const loader = require(path.join(ROOT, 'src', 'module-loader', 'loader.js'));
 const { seed, record, readTally, start, startDailySend, _reset } = require(path.join(ROOT, 'src', 'module-loader', 'error-tally.js'));
 // the in-memory tally is read the way tooling reads it: through the loader's snapshot
 const tally = { seed, record, readTally, start, startDailySend, _reset, snapshot: () => loader.loaderSnapshot().errorCounts };
-const sender = require(path.join(ROOT, 'scripts', 'gds', 'module-error-report.js'));
+const sender = require(path.join(ROOT, 'scripts', 'bongos', 'module-error-report.js'));
 const express = require('express');
 
 function tmpDir(prefix) { return fs.mkdtempSync(path.join(os.tmpdir(), prefix)); }

package/tests/module_install.mjs

@@ -1,6 +1,6 @@
 // tests/module_install.mjs — `bongos module install <key>` (task 1003785, ADR 0338 D1).
 // No network, no database: cmdInstall runs against a fake store built from a REAL
-// packed tarball (scripts/gds/module-artifact.js packModule), so verification is the
+// packed tarball (scripts/bongos/module-artifact.js packModule), so verification is the
 // real verifyModuleArtifact. The store's read side (src/bongos/module-store.js) runs
 // against a fake pg client, and the three routes are pinned in their source.
 //
@@ -16,9 +16,9 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { packModule, verifyModuleArtifact } = require('../scripts/gds/module-artifact.js');
-const { readTar, buildTar } = require('../scripts/gds/artifact-format.js');
-const { cmdInstall } = require('../scripts/gds/module.js');
+const { packModule, verifyModuleArtifact } = require('../scripts/bongos/module-artifact.js');
+const { readTar, buildTar } = require('../scripts/bongos/artifact-format.js');
+const { cmdInstall } = require('../scripts/bongos/module.js');
 const { isFreePrice, resolveAcquirable, versionArtifactFile, relativeArtifactPath } = require('../src/bongos/module-store.js');
 
 const NOW = () => new Date('2026-09-29T00:00:00Z');

package/tests/module_loader.mjs

@@ -252,6 +252,8 @@ test('the live tree discovers the extracted modules cleanly (BV1.R43/R48/R47/R49
   // And public-landing (task 1003322 / ADR 0218) — the front door, the THIRD web
   // surface after status-ui and hall-ui and the first to declare apexRoot instead
   // of a Host prefix; default-on because every instance answers at its own apex.
+  // And raise (task 1004847 / ADR 0384) — the /raise investor page, default:false
+  // and enabled only on the hub, so discovered here like agents.
   // All are discovered; none has validation
   // errors or coreVersion mismatches. Order is the readdir sort.
   //
@@ -276,7 +278,7 @@ test('the live tree discovers the extracted modules cleanly (BV1.R43/R48/R47/R49
   // That is precisely how the agents regression reached an open PR (task 1002485).
   loader._reset();
   const snap = loader.loaderSnapshot();
-  assert.deepEqual(snap.loaded, ['agents', 'autonomy', 'builder-settings', 'copy-desk', 'design-styles', 'discord', 'economy', 'government', 'grading', 'hall-ui', 'ideas', 'lifecycle', 'memory', 'npm-release', 'onboarding', 'page-notes', 'pixel-art', 'platform-identity', 'provisioning', 'public-landing', 'render-deploy', 'security', 'sessions', 'specialities', 'status-ui', 'ui-design']);
+  assert.deepEqual(snap.loaded, ['agents', 'autonomy', 'builder-settings', 'copy-desk', 'design-styles', 'discord', 'economy', 'government', 'grading', 'hall-ui', 'ideas', 'lifecycle', 'memory', 'npm-release', 'onboarding', 'page-notes', 'pixel-art', 'platform-identity', 'provisioning', 'public-landing', 'raise', 'render-deploy', 'security', 'sessions', 'specialities', 'status-ui', 'ui-design']);
   assert.deepEqual(snap.errors, []);
   assert.deepEqual(snap.skipped, []);
   loader._reset();

package/tests/module_owned_tests.mjs

@@ -17,7 +17,7 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { discoverModuleTests } = require(path.join(ROOT, 'scripts', 'gds', 'run-unit-tests.js'));
+const { discoverModuleTests } = require(path.join(ROOT, 'scripts', 'bongos', 'run-unit-tests.js'));
 
 function writeFixtureModule(root, key, { hasTests = true } = {}) {
   const dir = path.join(root, key);

package/tests/module_release_channels.mjs

@@ -20,7 +20,7 @@ const DDL = SQL.replace(/--.*$/gm, '');
 
 test('core_276 is additive and idempotent', () => {
   // the project's own migration linter, so this tracks its unsafe-pattern list as it grows
-  const lint = require('../scripts/gds/lint-migrations.js');
+  const lint = require('../scripts/bongos/lint-migrations.js');
   assert.deepEqual(lint.scanMigrationSql(SQL).unsafe || [], [], 'additive only');
   for (const m of DDL.matchAll(/CREATE (TABLE|INDEX)\s+(?!IF NOT EXISTS\b)(\w+)/g)) {
     assert.fail(`CREATE ${m[1]} ${m[2]} without IF NOT EXISTS is not safe to re-run`);

package/tests/module_store_howto.mjs

@@ -46,8 +46,8 @@ const poolPath = require.resolve('../src/bongos/pool.js');
 require.cache[poolPath] = { id: poolPath, filename: poolPath, loaded: true, exports: { pool: { connect: async () => ({ ...pool, release() {} }), query: pool.query } } };
 
 const buildModulesRouter = require('../src/bongos/routes/modules.js');
-const artifact = require('../scripts/gds/module-artifact.js');
-const { cmdInstall } = require('../scripts/gds/module.js');
+const artifact = require('../scripts/bongos/module-artifact.js');
+const { cmdInstall } = require('../scripts/bongos/module.js');
 
 const sections = (tag) => artifact.HOWTO_SECTIONS.map((h) => `## ${h}\n${tag} — ${h}.\n`).join('\n');
 
@@ -143,7 +143,7 @@ test('a checked how-to is cached: the second view reads no file', async () => {
 test('a stored tarball that no longer matches its hashes is never shown', async () => {
   const file = path.join(STORE, 'weather', 'weather-1.0.0.tgz');
   const good = fs.readFileSync(file);
-  const { readTar, buildTar } = require('../scripts/gds/artifact-format.js');
+  const { readTar, buildTar } = require('../scripts/bongos/artifact-format.js');
   const entries = readTar(good);
   entries.find((e) => e.name.endsWith('HOWTO.md')).buf = Buffer.from('## What it does\nswapped\n');
   fs.writeFileSync(file, buildTar(entries));